Accepting request 1249148 from devel:tools:building

OBS-URL: https://build.opensuse.org/request/show/1249148
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/melange?expand=0&rev=67

_service

@@ -3,19 +3,20 @@
     <param name="url">https://github.com/chainguard-dev/melange</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v0.11.1</param>
+    <param name="revision">v0.22.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
-    <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
+    <param name="changesgenerate">enable</param>
   </service>
   <service name="set_version" mode="manual">
-    <param name="basename">melange</param>
   </service>
-  <service name="tar" mode="buildtime"/>
+  <service name="go_modules" mode="manual">
+  </service>
+  <!-- services below are running at buildtime -->
+  <service name="tar" mode="buildtime">
+  </service>
   <service name="recompress" mode="buildtime">
     <param name="file">*.tar</param>
     <param name="compression">gz</param>
   </service>
-  <service name="go_modules" mode="manual">
-  </service>
 </services>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/chainguard-dev/melange</param>
-              <param name="changesrevision">a52edcc075ebf1dc89aea87893e3821944171ee3</param></service></servicedata>
+              <param name="changesrevision">3337f81591f7bcd9aa5d9d09d032f2a97e86d67d</param></service></servicedata>

melange-0.11.1.obscpio

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:aadf06a4fb142a2a9f89966a94404c5cd7996967cf9a4ee0a2a9bb8956647340
-size 4489228

melange-0.22.0.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7fa28d0a3f6d15c1b2613252656eac7d01e4d0b3b4c9e0300932da16b5b8c082
+size 2086924

melange.changes

@@ -1,3 +1,805 @@
+-------------------------------------------------------------------
+Fri Feb 28 05:40:30 UTC 2025 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.22.0:
+  * feat(build/pipelines): add llvm/covreport (#1822)
+  * build(deps): bump
+    go.opentelemetry.io/otel/exporters/stdout/stdouttrace (#1797)
+  * build(deps): bump github.com/moby/moby (#1820)
+  * build(deps): bump github.com/go-jose/go-jose/v3 in the
+    go_modules group (#1815)
+  * chore(docs): automatic generate pipeline docs (#1699)
+  * feat(build/pipelines): add go/covdata pipeline (#1821)
+
+-------------------------------------------------------------------
+Thu Feb 27 16:51:36 UTC 2025 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.21.2:
+  * bump apko, check repro with --repo-append (#1812)
+  * feat: build config can specify package CPE (#1768)
+  * rebuild: populate Config directly without file (#1813)
+  * Improve cmake build verbosity (#1806)
+  * build(deps): bump the gomod group across 1 directory with 3
+    updates (#1809)
+  * build(deps): bump the actions group across 1 directory with 5
+    updates (#1808)
+  * build(deps): bump github.com/go-jose/go-jose/v4 in the
+    go_modules group (#1811)
+  * Add ${{context.name}} string substitution (#1810)
+  * Add support in e2e-tests for melange build and then test.
+    (#1801)
+
+-------------------------------------------------------------------
+Mon Feb 24 06:03:12 UTC 2025 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.21.1:
+  * Give better names for invalid pipelines errors (#1805)
+  * Fix pkgconf lint (#1802)
+
+-------------------------------------------------------------------
+Thu Feb 20 18:19:36 UTC 2025 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.21.0:
+  * feat(pipelines/go/build): add extra-args input variable by
+    @maxgio92 in #1792
+  * rebuild: add e2e test by @imjasonh in #1789
+  * Add annotations field map[string]string by @jvanzyl in #1793
+
+-------------------------------------------------------------------
+Mon Feb 17 06:17:18 UTC 2025 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.20.1:
+  * rebuild: make SBOM more reproducible
+  * hide 'melange rebuild'
+  * fix unit test
+  * regen docs
+  * fix lint finding
+  * new command: rebuild
+  * config: Add option to allow udpates to common prerelease tags
+
+-------------------------------------------------------------------
+Thu Feb 13 06:17:12 UTC 2025 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.20.0:
+  * bump to latest apko
+  * fix lint finding
+  * bump apko to get quieter logs
+  * build(deps): bump the gomod group across 1 directory with 5
+    updates
+  * move unnecessary logs from info to debug or error (#1781)
+  * build(deps): bump the actions group across 1 directory with 4
+    updates
+  * build(deps): bump cloud.google.com/go/storage from 1.49.0 to
+    1.50.0
+
+-------------------------------------------------------------------
+Mon Feb 10 07:38:47 UTC 2025 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.19.5:
+  * Move buildUser to existing const block
+  * Consolidate build user/group strings
+  * Pass GID pointer to apko_types.GID in test_test.go
+  * Add build user to test pipeline environments (#1747)
+  * keep using /usr as prefix
+  * add npm and update prefix location
+
+-------------------------------------------------------------------
+Fri Feb 07 08:21:56 UTC 2025 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.19.4:
+  * patch: expose fuzz flag value
+  * sbom: update copyrightText from "/n" to "NOASSERTION"
+  * Fix some white space issues
+  * Add ${{subpkg.name}} string substitution
+  * lint: Add linter for usrmerge
+  * Fix documentation update
+  * Update the documentation for the new linter
+  * Fix a linting error
+  * Add a linter which checks for pkgconfig files
+  * patch: add --verbose flag to patch pipeline
+
+-------------------------------------------------------------------
+Mon Jan 27 15:58:37 UTC 2025 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.19.3:
+  * disallow uses: with a nested pipeline
+
+-------------------------------------------------------------------
+Mon Jan 20 05:59:17 UTC 2025 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.19.2:
+  * move some spammy logs to debug
+  * docs
+  * fix lint, use 22.04 where needed
+  * try ubuntu-22.04
+  * remove 'melange convert gem'
+  * remove 'melange convert python'
+
+-------------------------------------------------------------------
+Fri Jan 17 06:19:20 UTC 2025 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.19.1:
+  * Update pkg/build/build.go
+  * Update pkg/build/build.go
+  * sbom: switch SPDX namespace from SHA1 to FNV-1a
+  * Compress the initrd to workaround issue (#1745)
+  * stop generation homebrew update as melange in in homebrew core
+  * build(deps): bump the actions group with 2 updates
+  * build: Write a GCC specs file into workspace
+
+-------------------------------------------------------------------
+Sat Jan 11 12:10:16 UTC 2025 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.19.0:
+  * feat: add support to add and drop linux capabilities (#1702)
+  * Update pkg/build/pipeline.go
+  * Update pkg/build/pipeline.go
+  * build(deps): bump golang.org/x/time from 0.8.0 to 0.9.0
+  * build(deps): bump github.com/invopop/jsonschema from 0.12.0 to
+    0.13.0
+  * build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0
+  * build(deps): bump github.com/go-git/go-git/v5 from 5.12.0 to
+    5.13.1
+  * minor go cleanup
+  * minor go cleanup
+  * build(deps): bump sigs.k8s.io/release-utils from 0.8.5 to 0.9.0
+  * Fix(piepline): use correct comment systax
+  * fix: Move the go mod tidy after cd to modrootfeat: Check if
+    go.mod file exiest in modroot dir to ensure modroot is set
+    correctly
+
+-------------------------------------------------------------------
+Mon Dec 30 07:23:42 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.18.3:
+  * build(deps): bump actions/upload-artifact in the actions group
+
+-------------------------------------------------------------------
+Mon Dec 23 06:59:51 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.18.2:
+  * update apko to 0.22.4
+  * build(deps): bump cloud.google.com/go/storage from 1.48.0 to
+    1.49.0
+  * build(deps): bump google.golang.org/api from 0.211.0 to 0.214.0
+  * build(deps): bump the gomod group with 2 updates
+  * Fix numpy-test to work across python 3.12 to 3.13 transition.
+    (#1715)
+  * fix(qemu): remove redundant check
+  * bump: double-quote bumped version strings, avoid trailing
+    newline
+  * build(deps): bump actions/setup-go in the actions group
+  * build(deps): bump the gomod group with 2 updates
+  * fix linting
+  * respect ctx error
+  * fix(qemu): improve logging, make connection  check less spammy
+
+-------------------------------------------------------------------
+Mon Dec 16 06:21:41 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.18.1:
+  * fix error
+  * also drop util.RightJoinMap
+  * undo whitespace change
+  * remove unnecessary util.Dedup method
+
+-------------------------------------------------------------------
+Sat Dec 14 21:14:54 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.18.0:
+  * build(deps): bump chainguard.dev/apko from 0.21.0 to 0.22.1
+  * build(deps): bump
+    go.opentelemetry.io/otel/exporters/stdout/stdouttrace
+  * build(deps): bump dagger.io/dagger in the gomod group
+  * upgrade to 3.13
+  * sign: switch to SHA2-256 signature by default
+  * feat(pipelines/cargo): add support for rustflags (#1698)
+  * pipelines/split/dev - grab files in /usr/share/cmake
+
+-------------------------------------------------------------------
+Thu Dec 12 05:56:35 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.7:
+  * Bump apko and fix the thing I broke
+  * Handle WalkDir errors
+  * build(deps): bump dagger.io/dagger from 0.14.0 to 0.15.0
+
+-------------------------------------------------------------------
+Thu Dec 12 05:55:01 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.6:
+  * Bump apko to v0.20.2
+
+-------------------------------------------------------------------
+Thu Dec 12 05:53:56 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.5:
+  * drop spammy slog attributes
+  * build(deps): bump cloud.google.com/go/storage from 1.47.0 to
+    1.48.0
+
+-------------------------------------------------------------------
+Tue Dec 10 08:48:22 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.4:
+  * build(deps): bump golang.org/x/crypto from 0.29.0 to 0.30.0
+  * build(deps): bump github.com/chainguard-dev/clog
+  * build(deps): bump github.com/chainguard-dev/yam in the gomod
+    group
+  * melange/update block: provide config option to indicate that
+    automated pull requests should be merged in order rather than
+    superseding and closing previous unmerged PRs
+
+-------------------------------------------------------------------
+Sun Dec 08 09:04:12 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.3:
+  * fix(sca): Revert recent SCA changes for Ruby
+
+-------------------------------------------------------------------
+Sun Dec 08 08:48:12 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.2:
+  * fix(qemu): fix MacOS crosscompile path (#1678)
+  * fix(sca): Don't generate ruby dep when found in shebang
+  * fix(sca_test): Check for ruby-base
+  * fix(sca): Generate dependency for ruby-*-base instead of ruby-*
+  * Improve comment stripping errors
+  * Add package.srcdir substitution to README
+
+-------------------------------------------------------------------
+Mon Dec 02 10:02:15 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.1:
+  * test(compile): basic tests for stripComments
+  * fix(compile): label when compile error is for test pipeline
+
+-------------------------------------------------------------------
+Fri Nov 29 12:16:20 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.17.0:
+  * feat: add project.srcdir variable (#1666)
+
+-------------------------------------------------------------------
+Wed Nov 27 09:43:18 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.16.0:
+  * Include locked melange config in control section
+  * build(deps): bump github.com/stretchr/testify from 1.9.0 to
+    1.10.0
+  * build(deps): bump the gomod group with 2 updates
+  * build(deps): bump step-security/harden-runner in the actions
+    group
+
+-------------------------------------------------------------------
+Tue Nov 26 13:50:47 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.14:
+  * fix(pipeline): validate expected commit before passing to
+    git-checkout pipeline (#1667)
+  * Add git version to Summarize output
+  * RELEASE.md update, add statement that tags and releases will
+    update
+
+-------------------------------------------------------------------
+Fri Nov 22 19:27:01 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.13:
+  * Consider symlinks as potential provides for so:
+  * drop ntia e2e test
+
+-------------------------------------------------------------------
+Wed Nov 20 09:22:47 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.12:
+  * pipelines/cargo: ability to override output-dir
+  * fix(pipeline): check also checksum length
+  * fix(pipeline): do preliminary checks for checksum invalid chars
+  * docs: re-add release documentation markdown file
+  * hack: remove release.md
+  * docs: update automatic release interval
+  * add a dependency on texinfo or man-db as appropriate
+
+-------------------------------------------------------------------
+Tue Nov 19 08:38:41 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.11:
+  * build(deps): bump cloud.google.com/go/storage from 1.46.0 to
+    1.47.0
+
+-------------------------------------------------------------------
+Tue Nov 19 08:35:58 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.10:
+  * release: check for both tag and release
+
+-------------------------------------------------------------------
+Tue Nov 19 08:31:33 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.9:
+  * change release frequency to weekly
+  * review feedback
+  * docs(release): update release.md based on new workflow design
+  * fix(releases): more reliable releases
+  * Bump apko to v0.20.0
+  * Clean up workspace dir from inside runner to avoid permission
+    errors. (#1648)
+
+-------------------------------------------------------------------
+Fri Nov 15 07:06:41 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.8:
+  * Create sub-package directories in WorkDir before building
+    subpackage
+
+-------------------------------------------------------------------
+Thu Nov 14 10:13:58 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.7:
+  * build(deps): bump golang.org/x/text from 0.19.0 to 0.20.0
+
+-------------------------------------------------------------------
+Wed Nov 13 10:02:12 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.6:
+  * build(deps): bump golang.org/x/time from 0.7.0 to 0.8.0
+  * build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0
+  * Give a pointer to solution if bubblewrap runner cannot use user
+    namespace.
+  * build(deps): bump
+    go.opentelemetry.io/otel/exporters/stdout/stdouttrace
+  * build(deps): bump dagger.io/dagger from 0.13.7 to 0.14.0
+
+-------------------------------------------------------------------
+Tue Nov 12 10:04:04 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.5:
+  * anotha one
+  * qemu: reduce logspam for qemu runner
+  * build(deps): bump google.golang.org/api from 0.204.0 to 0.205.0
+  * build(deps): bump go.opentelemetry.io/otel from 1.31.0 to
+    1.32.0
+  * build(deps): bump chainguard.dev/apko in the gomod group
+  * build(deps): bump goreleaser/goreleaser-action in the actions
+    group
+  * cleanup: remove unnecessary utils
+  * chore(pipelines/fetch): Print expected and found checksums
+
+-------------------------------------------------------------------
+Tue Nov 12 09:51:27 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.4:
+  * fix(qemu): use proper machine type and cpu model based on host
+    arch (#1627)
+  * Switch the copy to pick up hidden files. (#1624)
+
+-------------------------------------------------------------------
+Tue Nov 12 09:45:23 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.3:
+  * Add man-db for doc packages
+
+-------------------------------------------------------------------
+Tue Nov 12 09:42:56 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.2:
+  * check ReplacesPriority if it is an integer
+
+-------------------------------------------------------------------
+Tue Nov 12 09:39:32 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.1:
+  * build(deps): bump the gomod group with 2 updates
+  * build(deps): bump google.golang.org/api from 0.203.0 to 0.204.0
+  * build(deps): bump cloud.google.com/go/storage from 1.45.0 to
+    1.46.0
+
+-------------------------------------------------------------------
+Sat Nov 02 08:22:10 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.15.0:
+  * feat(qemu): fix qemu command on cross-compilation cases
+  * update docs
+  * feat(qemu): add flag to specify cpu model to use, useful for
+    cases where /dev/kvm is not available
+  * fix(qemu): remove ssh ignoreHostKey, set an host-key retrieval
+    step, then use host key verification for all successive
+    commands
+  * fix linting
+  * fix(qemu): improve error when not finding a suitable kernel
+    image
+  * fix(qemu): use net.Listen to find open port, simplify random
+    port logic
+  * fix(qemu): use package go-shellquote and simplify cmd handling
+  * fix(qemu): use package go-shellquote and simplify cmd handling
+  * fix(qemu): specify KVM accelleration on linux, use only if
+    /dev/kvm is present
+  * fix(qemu): fix typos
+
+-------------------------------------------------------------------
+Tue Oct 29 15:08:52 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.11:
+  * build(deps): bump github.com/chainguard-dev/yam in the gomod
+    group
+  * build(deps): bump the actions group with 2 updates
+
+-------------------------------------------------------------------
+Sat Oct 26 08:39:55 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.10:
+  * build(deps): bump the gomod group across 1 directory with 2
+    updates
+
+-------------------------------------------------------------------
+Fri Oct 25 12:22:11 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.9:
+  * chore: unexport build pkg methods
+  * bump apko to get http key support
+  * go mod tidy
+  * bump apko to pick up chainguard key fix
+
+-------------------------------------------------------------------
+Thu Oct 24 08:27:07 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.8:
+  * fix(bubblewrap_runner): run as build 1000 by default (#1572)
+  * use --target-dir to target with cargo build
+  * pass --release as default opts
+  * allow passing more than one opts to cargo build
+
+-------------------------------------------------------------------
+Wed Oct 23 16:42:33 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.7:
+  * fix breakage
+  * go mod tidy
+  * bump apko dep to fix modtime issue
+
+-------------------------------------------------------------------
+Wed Oct 23 16:28:25 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.6:
+  * fix(build): require build config repo URL
+  * add build base to cargo-build pipeline
+
+-------------------------------------------------------------------
+Wed Oct 23 09:27:57 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.5 (0.14.4 was not properly released):
+  * fix(sbom): unique package IDs for upstream source
+  * test: (tdd) add failing test for dup spdx IDs
+
+-------------------------------------------------------------------
+Wed Oct 23 09:17:45 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.3:
+  * fix(build): use fallback values at entrypoint for git info
+  * fix(build): use the config file dir path for git detection
+
+-------------------------------------------------------------------
+Wed Oct 23 09:13:43 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.2:
+  * ci: add workflow to tag releases daily
+
+-------------------------------------------------------------------
+Wed Oct 23 09:08:38 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.1:
+  * Do not specify versions during 'melange test' (Revert #1579 and
+    #1518)
+
+-------------------------------------------------------------------
+Wed Oct 23 08:56:22 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.14.0:
+  * fix(build): make git autodetection best effort
+  * test: use x86_64 for build int tests
+  * move sbom test inside build test
+  * test(build): favor bwrap, fallback to docker
+  * chore: dedup test targets in makefile
+  * docs: run make docs-repo
+  * try qemu runner
+  * test: remove e2e tests for SBOM external refs
+  * unique SPDX IDs for multiple git repo checkouts
+  * chore: add make target for integration tests
+  * test: add integration test for build and SBOMs
+  * chore: bump Go version
+  * feat(sbom): overhaul SBOM generation logic
+
+-------------------------------------------------------------------
+Wed Oct 23 08:47:47 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.7:
+  * Pin the package version with ~ rather than =.
+  * build(deps): bump google.golang.org/api from 0.200.0 to 0.201.0
+  * build(deps): bump cloud.google.com/go/storage from 1.44.0 to
+    1.45.0
+  * bublewrap_runner: add /sys mount
+  * fix lint finding
+  * pipe it through cli
+  * cleanup glow up
+  * fix(qemu): fix missing pty allocation for debug shell in qemu
+    runners
+  * Do not add a cmd:awk dependency as nothing will ever provide
+    cmd:awk
+  * fix formatting lint
+  * fix(test): update tests to reflect new struct
+  * fix(qemu): fix failing test pipeline when using qemu runner
+  * fix test
+  * Pin the package version used during tests
+
+-------------------------------------------------------------------
+Wed Oct 16 07:52:03 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.6:
+  * run `make generate`
+  * rename exported GetTagFilterPrefix and GetTagFilterContains
+    functions to be normalized GetFilterPrefix and GetFilterPrefix
+  * update config: add version filter prefix and contains to
+    release monitor config block so implementations can perform the
+    same behaviour as git and github configs
+  * build(deps): bump
+    go.opentelemetry.io/otel/exporters/stdout/stdouttrace
+  * build(deps): bump google.golang.org/api from 0.199.0 to 0.200.0
+  * build(deps): bump the actions group with 2 updates
+  * build(deps): bump go.opentelemetry.io/otel/sdk from 1.30.0 to
+    1.31.0
+  * build(deps): bump the gomod group with 4 updates
+  * pipelines: fix split/debug
+
+-------------------------------------------------------------------
+Sun Oct 13 18:08:10 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.5:
+  * Enable pc file dependencies
+  * generateRuntimePkgConfigDeps: only do so for public .pc, not
+    vendored
+  * Improve some config parsing errors
+
+-------------------------------------------------------------------
+Fri Oct 11 09:25:44 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.4:
+  * Revert "sca: Properly detect .so files as deps"
+  * Revert "sca: check if runtime dependencies are vendored"
+
+-------------------------------------------------------------------
+Fri Oct 11 09:19:23 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.3:
+  * cmake: switch from MinSizeRel to Release
+
+-------------------------------------------------------------------
+Fri Oct 11 09:13:44 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.2:
+  * fix: pc provides
+  * build(deps): bump golang.org/x/time from 0.6.0 to 0.7.0
+
+-------------------------------------------------------------------
+Fri Oct 11 09:11:28 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.1:
+  * tidy
+  * build(deps): bump cloud.google.com/go/storage from 1.43.0 to
+    1.44.0
+  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.28.0
+  * build(deps): bump github.com/chainguard-dev/yam in the gomod
+    group
+  * build(deps): bump the actions group with 2 updates
+  * sca: check if runtime dependencies are vendored
+
+-------------------------------------------------------------------
+Sun Oct 06 08:01:56 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.13.0:
+  * Fix typo in README
+  * test: Fix typo
+  * Added additional documentation for package version selection
+  * sca: Properly detect .so files as deps
+  * Adjust an e2e-test that made a bad assumption.
+  * update the docs
+  * add --cleanup flag (default true)
+  * build(deps): bump github.com/chainguard-dev/yam from 0.1.1 to
+    0.2.0
+  * build(deps): bump google.golang.org/api from 0.198.0 to 0.199.0
+  * build(deps): bump actions/checkout in the actions group
+  * Support string replacement in ImageContents
+  * build(deps): bump the gomod group with 5 updates
+  * git-checkout: support scheduled updates
+  * sca: never emit libcuda.so.1 runtime dep
+  * Add table of contents
+  * Add pipeline markdown reference markdown generator.
+  * feat(melange): Add sub for output directory
+
+-------------------------------------------------------------------
+Sat Sep 21 16:30:34 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.12.1:
+  * build(deps): bump github.com/docker/cli
+  * build(deps): bump github.com/docker/docker
+  * build(deps): bump the gomod group with 2 updates
+  * build(deps): bump chainguard.dev/apko from 0.18.1 to 0.19.1
+  * sca: remove set but never used variable
+  * update_config: expose function to get valid schedule messages
+  * Add uses and name to slog values
+  * Include subpackage name in slog values
+  * Only read the first line for shbang.
+  * pombump: add flag to display the dependency tree
+  * build(deps): bump dagger.io/dagger from 0.12.7 to 0.13.0
+  * build(deps): bump step-security/harden-runner in the actions
+    group
+  * build(deps): bump
+    go.opentelemetry.io/otel/exporters/stdout/stdouttrace
+  * build(deps): bump the gomod group with 2 updates
+  * keygen: reject bit size < 4096
+  * cleanup: remove some direct imports of charm log
+
+-------------------------------------------------------------------
+Sat Sep 14 15:42:45 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.12.0:
+  * Upgrade to new hash-agnostic APIs for sign and verify
+  * Upgrade to apko v0.18.0
+  * index: stop writing APKINDEX.json
+  * update to go1.23.1
+  * build(deps): bump google.golang.org/api from 0.195.0 to 0.196.0
+  * build(deps): bump golang.org/x/crypto from 0.26.0 to 0.27.0
+  * build(deps): bump the gomod group with 2 updates
+  * pipelines/ruby: remove signing_key by default
+  * config: Whack more moles for string replacement
+  * install go
+  * lint
+  * upgrade to golang 1.23
+
+-------------------------------------------------------------------
+Sat Sep 14 15:36:42 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.11.6:
+  * adds git checkout fetch,update,test and yams the melange
+    apkbuild yamls
+
+-------------------------------------------------------------------
+Sat Sep 14 15:33:26 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.11.5:
+  * fix(split pipelines): Don't split lib64 libraries
+
+-------------------------------------------------------------------
+Sat Sep 14 15:27:45 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.11.4:
+  * fix(split pipelines): Check package was defined, not package
+    directory
+  * fix(split/dev): Support for /usr/local
+  * fix(split pipelines): Add support for lib64
+  * fix(split pipelines): Use package name instead of package dir,
+    use exact paths
+  * Update dev.yaml
+  * feat(pipelines/split): Support overriding source package
+    directory
+  * build(deps): bump dagger.io/dagger in the gomod group
+  * build(deps): bump actions/upload-artifact in the actions group
+
+-------------------------------------------------------------------
+Sat Sep 14 15:18:12 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 0.11.3:
+  (0.11.2 is the same commit hash as 0.11.1):
+  * fix(sca): Correctly check for existing Ruby runtime dependency
+    by @EyeCantCU in #1387
+  * build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 in the
+    actions group by @dependabot in #1378
+  * build(deps): bump google.golang.org/api from 0.187.0 to 0.188.0
+    by @dependabot in #1382
+  * build(deps): bump github.com/google/go-containerregistry from
+    0.19.2 to 0.20.1 by @dependabot in #1392
+  * build(deps): bump step-security/harden-runner from 2.8.1 to
+    2.9.0 in the actions group by @dependabot in #1391
+  * build(deps): bump the gomod group across 1 directory with 2
+    updates by @dependabot in #1390
+  * build(deps): bump dagger.io/dagger from 0.11.9 to 0.12.1 by
+    @dependabot in #1389
+  * build(deps): bump github.com/docker/cli from
+    27.0.3+incompatible to 27.1.0+incompatible by @dependabot in
+    #1397
+  * Expose ignoreSignatures functionality by @Kevin-Molina in #1375
+  * build(deps): bump github.com/docker/docker from
+    27.0.3+incompatible to 27.1.0+incompatible by @dependabot in
+    #1396
+  * build(deps): bump docker/login-action from 3.2.0 to 3.3.0 in
+    the actions group by @dependabot in #1398
+  * build(deps): bump google.golang.org/api from 0.188.0 to 0.189.0
+    by @dependabot in #1401
+  * fix: ignore resource requests for the docker runner by
+    @imjasonh in #1403
+  * build(deps): bump dagger.io/dagger from 0.12.1 to 0.12.2 in the
+    gomod group by @dependabot in #1400
+  * Bump apko dependency by @mattmoor in #1404
+  * fix ruby sca by @xnox in #1410
+  * Add HOME=/root to default test environment. by @smoser in #1408
+  * build(deps): bump the gomod group with 4 updates by @dependabot
+    in #1405
+  * update config: provide configuration to describe polling and
+    schedules by @rawlingsj in #1412
+  * build(deps): bump the gomod group with 2 updates by @dependabot
+    in #1416
+  * build(deps): bump google.golang.org/api from 0.189.0 to 0.190.0
+    by @dependabot in #1419
+  * build(deps): bump the actions group with 2 updates by
+    @dependabot in #1415
+  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 by
+    @dependabot in #1418
+  * build(deps): bump golang.org/x/time from 0.5.0 to 0.6.0 by
+    @dependabot in #1417
+  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0 by
+    @dependabot in #1420
+  * update config: replace recently added polling with git struct
+    by @rawlingsj in #1421
+  * build(deps): bump github.com/google/go-containerregistry from
+    0.20.1 to 0.20.2 in the gomod group by @dependabot in #1423
+  * build(deps): bump golang.org/x/text from 0.16.0 to 0.17.0 by
+    @dependabot in #1424
+  * build(deps): bump google.golang.org/api from 0.190.0 to 0.191.0
+    by @dependabot in #1426
+  * build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 by
+    @dependabot in #1428
+  * move 'adding package %q for pipeline %q' to debug logging by
+    @imjasonh in #1429
+  * don't depend on apko's custom log package by @imjasonh in #1430
+  * build(deps): bump github.com/chainguard-dev/yam from 0.0.13 to
+    0.1.0 by @dependabot in #1431
+  * Feat/qemu runners by @89luca89 in #1386
+  * Attempt to fix qemu ci by @jonjohnsonjr in #1434
+  * build(deps): bump the actions group with 3 updates by
+    @dependabot in #1432
+  * Centralize sca options handling by @jonjohnsonjr in #1433
+  * Add test to catch duplicate package names by @jonjohnsonjr in
+    #1439
+  * build(deps): bump the gomod group with 4 updates by @dependabot
+    in #1437
+  * build(deps): bump google.golang.org/api from 0.191.0 to 0.192.0
+    by @dependabot in #1438
+  * move 'found pipeline' log message to debug by @imjasonh in
+    #1440
+  * melange convert python: use normalized names by @pnasrat in
+    #1441
+  * Bump apko to get chainctl auth error log by @jonjohnsonjr in
+    #1442
+  * Replace "needs" in range pipelines by @jonjohnsonjr in #1445
+  * docs: Add information on the repository used with the git
+    update configuration option by @philroche in #1447
+  * Refactor parts of the ParseConfiguration by @jonjohnsonjr in
+    #1446
+  * build(deps): bump
+    go.opentelemetry.io/otel/exporters/stdout/stdouttrace from
+    1.28.0 to 1.29.0 by @dependabot in #1455
+  * build(deps): bump google.golang.org/api from 0.192.0 to 0.194.0
+    by @dependabot in #1452
+  * config: Replace pipelines at top level by @jonjohnsonjr in
+    #1456
+  * refactor(sbom): cleanup, simplify, and document code by
+    @luhring in #1458
+  * More SBOM logic improvements by @luhring in #1459
+  * build(deps): bump github.com/docker/cli from
+    27.1.2+incompatible to 27.2.0+incompatible by @dependabot in
+    #1461
+  * build(deps): bump google.golang.org/api from 0.194.0 to 0.195.0
+    by @dependabot in #1463
+  * build(deps): bump github.com/docker/docker from
+    27.1.2+incompatible to 27.2.0+incompatible by @dependabot in
+    #1462
+  * build(deps): bump dagger.io/dagger from 0.12.5 to 0.12.6 in the
+    gomod group by @dependabot in #1465
+  * chore(cargo/build): Allow changing install dir, add busybox by
+    @EyeCantCU in #1466
+  * sca: add support for more go fips toolchains by @xnox in #1471
+  * sca: make pc: provides/vendored use full package version by
+    @xnox in #1467
+
 -------------------------------------------------------------------
 Fri Jul 19 05:38:35 UTC 2024 - opensuse_buildservice@ojkastl.de
 

melange.obsinfo

@@ -1,4 +1,4 @@
 name: melange
-version: 0.11.1
+version: 0.22.0
-mtime: 1721353354
+mtime: 1740691938
-commit: a52edcc075ebf1dc89aea87893e3821944171ee3
+commit: 3337f81591f7bcd9aa5d9d09d032f2a97e86d67d

melange.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package melange
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,27 +16,33 @@
 #
 
 
-%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
-
 Name:           melange
-Version:        0.11.1
+Version:        0.22.0
 Release:        0
 Summary:        Build APKs from source code
 License:        Apache-2.0
 URL:            https://github.com/chainguard-dev/melange
 Source:         melange-%{version}.tar.gz
 Source1:        vendor.tar.gz
-BuildRequires:  go >= 1.22
+BuildRequires:  bash-completion
+BuildRequires:  fish
+BuildRequires:  go >= 1.23
+BuildRequires:  zsh
 
 %description
 Build apk packages using declarative pipelines.
 
-Commonly used to provide custom packages for container images built with apko. The majority of apks are built for use with either the Wolfi or Alpine Linux ecosystems.
+Commonly used to provide custom packages for container images built with apko.
+The majority of apks are built for use with either the Wolfi or Alpine Linux
+ecosystems.
 
 Key features:
 
-* Pipeline-oriented builds. Every step of the build pipeline is defined and controlled by you, unlike traditional package managers which have distinct phases.
+* Pipeline-oriented builds. Every step of the build pipeline is defined and
-* Multi-architecture by default. QEMU is used to emulate various architectures, avoiding the need for cross-compilation steps.
+  controlled by you, unlike traditional package managers which have distinct
+  phases.
+* Multi-architecture by default. QEMU is used to emulate various architectures,
+  avoiding the need for cross-compilation steps.
 
 %package -n %{name}-bash-completion
 Summary:        Bash Completion for %{name}
@@ -96,8 +102,8 @@ mkdir -p %{buildroot}%{_datarootdir}/fish/vendor_completions.d/
 %{buildroot}/%{_bindir}/%{name} completion fish > %{buildroot}%{_datarootdir}/fish/vendor_completions.d/%{name}.fish
 
 # create the zsh completion file
-mkdir -p %{buildroot}%{_datarootdir}/zsh_completion.d/
+mkdir -p %{buildroot}%{_datarootdir}/zsh/site-functions/
-%{buildroot}/%{_bindir}/%{name} completion zsh > %{buildroot}%{_datarootdir}/zsh_completion.d/_%{name}
+%{buildroot}/%{_bindir}/%{name} completion zsh > %{buildroot}%{_datarootdir}/zsh/site-functions/_%{name}
 
 %files
 %doc README.md
@@ -105,17 +111,12 @@ mkdir -p %{buildroot}%{_datarootdir}/zsh_completion.d/
 %{_bindir}/%{name}
 
 %files -n %{name}-bash-completion
-%dir %{_datarootdir}/bash-completion/completions/
 %{_datarootdir}/bash-completion/completions/%{name}
 
 %files -n %{name}-fish-completion
-%dir %{_datarootdir}/fish
-%dir %{_datarootdir}/fish/vendor_completions.d
 %{_datarootdir}/fish/vendor_completions.d/%{name}.fish
 
 %files -n %{name}-zsh-completion
-%defattr(-,root,root)
+%{_datarootdir}/zsh/site-functions/_%{name}
-%dir %{_datarootdir}/zsh_completion.d/
-%{_datarootdir}/zsh_completion.d/_%{name}
 
 %changelog

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:9db0b2132c06068d0b29926546808cd21efd7c31e697faff46a482e937ff38aa
+oid sha256:cec0186e0994495ed0e58eaacd107eaf32bb401e4024bd1b4ad36753360f8b00
-size 9950544
+size 12932528